Add --honor-cipher-order option to mitigate BEAST attacks

This patch basically includes functionality Apache and lighttpd have, mainly to mitigate BEAST attacks.

Here is a link to the patch for lighttpd that was accepted a year ago:

http://redmine.lighttpd.net/issues/2364

The way I tested this was using shrpx as a reverse proxy for lighttpd, and using
https://www.ssllabs.com/ssltest/index.html
to test whether it worked or not.